Singapore-based Smart Media4U Technology says it fixed SHAREit vulnerabilities that may have allowed attackers to execute arbitrary code remotely on users’ devices. The security bugs impact the company’s app, an application that downloaded more than 1 billion times. Trend Micro mobile threat analysts found that the bugs can be abused by attackers for gaining access to the sensitive information stored by users on vulnerable devices. In 2019, the vendor also patched two other security vulnerabilities that would’ve enabled attackers to bypass the app’s authentication mechanism and download arbitrary user files.
Source: https://www.bleepingcomputer.com/news/security/shareit-fixes-security-bugs-in-app-with-1-billion-downloads/